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We prove a general lower bound on the bounded-error entanglement-assisted quantum communi- 
cation complexity of Boolean functions. The bound is based on the concept that any classical or 
quantum protocol to evaluate a function on distributed inputs can be turned into a quantum com- 
munication protocol. As an application of this bound, we give a very simple proof of the statement 
that almost all Boolean functions on n + n bits have linear communication complexity, even in the 
presence of unlimited entanglement. 



> \ I. INTRODUCTION 

in 

Consider a total Boolean function / : {0,1}™ x {0,1}™ i— > {0,1}. The quantum communication 
complexity of / is defined to be the minimum number of qubits required to be transmitted between 
two parties (Alice and Bob) for them to compute f(x, y) for any two n-bit inputs x, y, given that 
Alice starts out with x and Bob with y. This number is clearly upper bounded by n, but for some 
functions may be considerably lower. Alice and Bob may be allowed some probability of error e, and 
may be allowed to share an entan gled state before they start their protocol. We will assume that 
Bob has to output the result. (See |25| and 01 f° r excellent introductions to quantum and classical 
communication complexity, respectively.) 

Some functions are known to have a quantum communication complexity lower than their classi- 
cal communication complexity (for example, a bounded-error protocol for the disjointness function 
f(x,y) = 1 \x A y\ = requires fl(n) bits of classical communication, but only 0(y / n) qubits of 
quantum communication 1, '23J ) , but it is still open whether the quantum communication complex- 
ity of total functions can ever be exponentially smaller than the classical communication complexity. 
It is therefore of interest to produce lower bounds on quantum communication complexity. In this 
context, the model with prior entanglement is less well understood; although there are strong bounds 
known for some classes of functions |2^| , there are few general lower bounds Q. It has been shown 
0, IT(i| that sharing entanglement may significantly reduce the communication cost of computing a 
partial function (where there is a promise on the input), but it is unknown whether a similar result 
may hold for total functions. 

In this paper, we develop an elegant result of Cleve et al. that relates computation to communica- 
tion. Cleve et al. showed |5| that, if Alice and Bob have access to a protocol to exactly compute the 
inner product function IP(x,y) — J2i x iUi ( m °d 2), then this can be used to produce a quantum 
protocol that communicates Alice's input x to Bob. They used this to show that IP cannot be 
computed (exactly and without prior entanglement) by sending fewer than n bits from Alice to Bob. 
Similar results hold for the bounded-error case and with prior entanglement. 



'Electronic address: montanar@cs.bris.ac.uk 
t Electronic address: |a. j . winterObristol. ac . uk| 



2 



We show that a weaker form of this result can be extended to all Boolean functions. The exten- 
sion leads to the development of a new complexity measure for Boolean functions: communication 
capacity. Given a Boolean function f(x,y), we define the communication capacity of / as the max- 
imum number of bits which the execution of a protocol to compute / allows Alice to communicate 
to Bob (in an asymptotic sense). This is a concept which has no classical analogue, and which can 
be shown to give a lower bound on the quantum communication complexity of / (with or without 
entanglement). 

The lower bound we obtain turns out to be a generalisation of a bound obtained by Klauck 
|15| on quantum communication complexity in the model without entanglement. The result here 
can thus be seen as extending Klauck's bound to the model of entanglement-assisted quantum 
communication, and giving it a satisfying operational interpretation. As our bound also holds for 
classical communication complexity, it fits into the framework of results using ideas from quantum 
information to say something about classical computation. 

We will use the standard notation Qe{I) to denote the quantum communication complexity of 
/ in the case where the protocol must be exact, Q e {f) the complexity where Alice and Bob are 
allowed to err with probability e < 1/2, and Qa(/) the complexity in the case where e = 1/3. In all 
three cases, Alice and Bob's initial state is separable; Q* E {f), Q*(/) and Q%(f) will represent the 
equivalent quantities in the case where they are allowed to share an arbitrary initial entangled state. 

As is usual in computational complexity, we would expect most functions to have "high" quantum 
communication complexity. Kremer showed [l6l | by a counting argument that a random function 
/ has Qi{f) > n/2 (and thus Qe{J) > n /2)- Buhrman and de Wolf extended Kremer's methods 
to show that, for all /, Q%(f) > (logrank(/))/2 jj] (an equivalent result is shown in section 6.4.2 
of As almost all Boolean matrices have full rank, this shows that for almost all /, Q* E {f) > 

n/2. Very recently, Gavinsky, Kempe and de Wolf || have shown the final remaining case: for 
almost all /, Q^if) = tl(n). Their technique was to relate quantum communication protocols to 
quantum fingerprinting protocols, and then to show a relationship between quantum fingerprinting 
and some well-studied concepts from classical computational learning theory. This result was shown 
independently by Linial and Shraibman [l^; their paper also extends the well-known discrepancy 
lower bound to the model of quantum communication with entanglement. 

As an application of our communication capacity technique, we reprove the result that for almost 
all /, = ^i 71 )- The proof is of a quite different character and of (arguably) a more "quantum" 

nature, as it is based on showing that the entropy of almost all density matrices produced in a 
certain random way is high. 



A. Notation 

We will use M to denote the square communication matrix of / (where M xy is equal to (— l)^ x,y ^). 
H{v) will denote the Shannon entropy of a vector v, and S(p) the von Neumann entropy of a density 
matrix p (S(p) = — tr(plogp)). All logarithms will be taken to base 2. 



II. TURNING ANY DISTRIBUTED FUNCTION INTO A COMMUNICATION 

PROTOCOL 

In this section, we will describe a protocol (which is a simple extension of the protocol in |5| for 
IP) that allows any protocol for evaluating a distributed function to be turned into a communication 
protocol. However, for some functions, the communication will be considerably more inefficient than 
IP allows (Alice may only be able to send <C n bits to Bob). 
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A. Exact protocols 



Say Alice and Bob have access to a classical or quantum protocol that computes f(x,y) exactly. 
We express this as a unitary P that performs the following action. 

P\x)A\y)B\0)B\a)AB = \x) a\v) b\J '0,2/)) bW) ab (1) 

where |o), \a') are arbitrary (and possibly entangled) ancilla states shared by Alice and Bob. Note 
that, as P does not modify the first two registers, we may decompose it as follows: 

P = '$2\x)(x\ A ®\y){y\ B ®U 3!y (2) 
x,y 

for some unitary U xy acting only on the last two registers. Following [{|, we will turn this into a 
"clean" protocol P' by giving Bob an additional qubit to copy the answer into, then running the 
protocol backwards to uncompute the "junk" \a'). The steps of the clean protocol are thus 

(i) \x) A \y)B\0)B\0) B \a)AB 

(ii) -> \x) A \v)B\f(z,y))B\0)B\a')AB 

(iii) -> \x) A \y)B\f{x,y))B\f{x,y)) B \a') A B 

(iv) -> \x) A \y)B\0)B\f(x,y)) B \a)AB 

where now the fourth register contains the answer. Ignoring the third and fifth registers, which are 
the same at the beginning and the end of the protocol, we are left with the map 

P'\x)a\v)b\0)b = \x) A \y)B\f(x,y))B (3) 

Note that, if the original protocol P communicated a qubits from Alice to Bob and b qubits from 
Bob to Alice, the protocol P' requires a + b qubits to be communicated in each direction. That is, P' 
sends as many qubits in the "forward" direction as the original protocol P sends in total. Now say 
Alice wants to communicate her input x to Bob using this protocol. They start with the following 
state, where (b v ) is an arbitrary probability distribution on Bob's inputs: 




£ yfc\y) B ) -Uo>-|l»s (4) 



Note that this state is separable (so we do not require entanglement to execute the communication 
protocol). After executing the clean protocol for /, they are left with 

P» = |z>J-L Vb~y\y)B(\f(x,y))-\l-f(x,y)}) B ) (5) 

V v %e{oa}" / 

= \x) A l Yl (-l) /(a,w) V^ll/M 4?(|0)-|1»b (6) 
\ae{o,i}" / VZ 

Ignoring the registers that remain the same throughout, Bob has the following state at the end of 
the protocol. 

IVfe>= E (-^y^Vhly) (7) 

ye{o,i}" 
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This state provides some information about Alice's bit string x. If (tp x \ij}x') = for all x' ^ x (as 
is the case with the protocol of [5j for IP, where Bob uses the uniform distribution on his inputs) 
then Bob can determine x with certainty and hence has received n bits from Alice. If this is not the 
case, then we can still quantify precisely how much information can be transmitted. The protocol 
is equivalent to Alice encoding the classical bit-string a; as a state \i/j x )> an d co-operating with Bob 
to send it to him. Say Alice uses a distribution (a x ) on her inputs. Then the ensemble representing 
what Bob eventually receives is 

P = ^2 a ^l^)(^l (8) 

z6{0,l}" 

By Holcvo's theorem [T^ . the entropy S(p) describes the maximum number of bits of classical in- 
formation about x available to Bob by measuring p. And, by the Holevo-Schumacher- Westmoreland 
channel coding theorem for a channel with pure signal states Alice and Bob can achieve this 
bound (in an asymptotic sense) using block coding! 

Therefore, the ability to compute / exactly can be used to transmit S(p) bits of information 
through a quantum channel, even though this does not hold if Alice and Bob are restricted to 
a classical channel. We thus define the communication capacity of a Boolean function / as the 
maximum over all probability distributions (a x ) (on Alice's inputs) and (b y ) (on Bob's inputs) of 

si ]T a.hkWxl] , where \i> x )= ]T {-l) s{x - y) ^Ty\y) (9) 



B. Bounded error protocols 



In the case where Alice and Bob have access to a protocol computing / with some probability of 
error, Bob will not have the state \tp x ) at the end of the protocol, but rather some approximation 
\ipx)' We will now show that, if the error probability is small, this is in fact still sufficient to 
communicate a significant amount of information from Alice to Bob. As before, Alice will use a 
distribution (a x ) on her inputs, and Bob a distribution (b y ). 

Say Alice and Bob are using a protocol P e that computes / with probability of error e, where 
e < 1/2. As before, the \x) and \y) registers will be unchanged by this protocol, so we can write 

P e = ^|x)(a;U®|y)(y| s ®[/^ (10) 
Now let us run the protocol on the same starting state \ip) as in the previous section. 

!li \*U I "4 E Vb~y\y)B\0)B(\0)-\l)) B j «) uj 



(n)^\x) A \^= Yl V / ^ly>B(a^|0)+/? :cy |l»B(|0)-|l» J 



\a ) ab 



where the effect of U^. y on the "answer" qubit has been decomposed into a xy and j3 xy components. 
If f(x,y) = 0, then \a xy \ 2 > 1 - e, and thus (by unitarity) \/3 xy \ 2 < e; if f(x,y) = 1, \j3 xy \ 2 > 1- e 
and |a X i/| 2 < £• The ancilla register is still completely arbitrary, and in particular may be entangled 
with any of the other registers. Continuing the protocol, we have 
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(iii) - \x) A f 4= E v / ^l2/>BKy|0)|0)-ax,|0)|l) -^11)10) +^11)11))^ I |a% B (11) 

\ V 2 »e{o,i}» / 

(iv) ^|^ (4 E v / ^ly>BK y (a;„|o)+ 7 : !y |i»|o)-a xy (a; !y |o)+7: y |i»|i> 

V V ve{o,i}» (12) 



A.yC^v|0> + ^|1))|0) + xy (0* xy \O) + |a) 



.-IB 



1^ ( 7f E V^MbCO*** ^ - + {a.ylly - xy 5l y )\l)) B {\Q) - \1)) B \\a) 



AB 



(13) 

where we introduce "f xy and S* y as arbitrary elements of {U xy )\ subject only to the constraint that 
U^, y be unitary. We may now remove registers that end the protocol unchanged and rewrite Bob's 
final state as 

m= E ^>((Ky| 2 -|/3^| 2 )|0) + (a^7:,-M !y )|l)) (14) 

ye{0,l}" 

Now, if f(x,y) = 0, then \a xy \ 2 - \/3 xy \ 2 > 1 - 2e > 0, whereas if f(x,y) = 1, \a xy \ 2 - \/3 xy \ 2 < 
2e — 1 < 0. We may therefore write 

IO= E ^|2/)((-l) /( ^ ) cos^|0) + e^sin^|l)) (15) 

y&{0,l} n 

where 6 xy is real with cos 9 xy > 1 — 2e, and <j) xy is an arbitrary phase. Crucially, the form of these 
states is quite restricted and close to the original \4>x)- In fact, it is clear that 

|(<^|(0|M>| 2 >(l-2£) 2 (16) 

Set p € = Z)xe{o,i}" a slV£)(V£l- We wm compare this to the state p' = J2 x e{o,i}™ a x\^x)\0) (ipx\(0\ 
(where of course S(p') = S(p)). We have 

\\p' -Pli<2v/l-(l-2e) 2 < (17) 

We will use Fannes' inequality to show that S(p e ) ~ S(p). Define the function 

l \ _ f -xlogx for x < 1/e , . 

71o[x) ~ \ 1/eloge for x> 1/e (18j 

Then Fannes' inequality gives that 

S(p e ) > S(p) - 4V~en - logr^Vi) (19) 



C. Communication complexity lower bounds from communication capacity 

A lower bound for the communication capacity of a function / can be written down in terms of 
its communication matrix M as follows. As before, set 

p= E «*IV»x><Vx| for liM = E i- l ) Kx ' v) V\\v) (20) 

xe{Q,i} n ye{o,i}" 



6 



for arbitrary probability distributions (a x ), (b y ) on Alice and Bob's inputs. Define the rescaled Gram 
matrix G as Gij — • Now it is known |f l| that G will have the same eigenvalues as 

p, and thus the same entropy. But it can easily be verified that 

G = (AMB)(AMB)^ (21) 

where A and B are diagonal matrices with An = s/al, Bn = yfUi. So the eigenvalues of G are simply 
the singular values squared of AMB. We may thus write 

S(p) = H(a 2 (AMB)) (22) 

where a 2 (M) denotes the vector containing the squared singular values of a matrix M. We can 
now produce lower bounds on the quantum communication complexity of / by appealing to the 
result of Nayak and Salzman [l^ which states that, if Alice wishes to transmit n bits to Bob over 

a quantum channel with probability of success p, Alice must send m > i (n — log bits to Bob. 

If they are not allowed to share prior entanglement, the factor of 1/2 vanishes. This immediately 
gives a lower bound on the exact quantum communication complexity of /, as lower bounds on the 
forward communication required for the "clean" protocols that we use translate into lower bounds 
on the total amount of communication needed for any communication protocol. 

In the bounded-error case, we can still use the Nayak-Salzman result. Consider a block coding 
scheme with blocks of length k where each letter is produced by one use of /, as in the previous 
section. By [llj there exists such a scheme that transmits kS(p € ) — o(k) bits of information with 
k uses of /, as k — > oo, and probability of success p — > 1. A lower bound on the bounded-error 
quantum communication complexity of / follows immediately: 

mk>±(kS(pt)~o(k)~o(l)), (23) 

hence, after taking the limit k — ► oo, p — ► 1, we find m > ^S(p e ). 

In order to reduce the error probability e to 0(1/ n 2 ) (to remove the additive term linear in n in 
inequality (19)), it is sufficient to repeat the original protocol O(logn) times and take a majority 
vote ^(|. Alternatively, using l|19|) directly gives a better bound for functions for which S(p) is 
linear in n. We thus have the following theorem. 

Theorem II. 1. Let f : {0, 1}" x {0, 1}™ i— > {0, 1} be a total Boolean function with communication 
matrix M. Then, for any non-negative diagonal matrices A and B with \\A\\2 = ||-B||2 = lj 

QeU) > H(a 2 (AMB)) (24) 

QW) > \h{cj 2 {AMB)) (25) 

, ( Q(H (a 2 (AMB))/ log n) , . 

^e(J) > | H(a 2 (AMB)) - Ven - log?7o(Ve) 1 ' 

n * (n > / m(° 2 (AMB))/\ogn) 

" \ i(ff(a 2 (AA/B))- V?n-log77o(V^)) [Z '> 

where rjo(x) is defined as in equation J 181) . 

If we use the uniform distribution on Alice and Bob's inputs, then AMB = M/2™. In the case 
of the models without entanglement, Klauck obtained this specialised result via a different method 
|15| . This theorem can thus be seen as simultaneously extending Klauck's work to the model with 
entanglement, generalising it, and giving it an operational interpretation. The special case of the 
uniform distribution was also used by Cleve et al. |5j to prove their lower bound on the communication 
complexity of IP. 



7 



III. RENYI ENTROPIC BOUNDS ON COMMUNICATION CAPACITY 



A disadvantage of the von Neumann entropy S(p) is the difficulty involved in its computation. 
The second Renyi entropy ^(p) p^j provides an easily computable lower bound on S(p). S2G ) i s 
defined as 

S 2 (p) = -logtr(p 2 ) = -log^| Py | 2 (28) 

and we have the fundamental property that <S*2(p) < S(p). The Renyi entropy also obeys the 
bounds < ^(p) < n. As with the von Neumann entropy, the Renyi entropy is a function only 
of the eigenvalues of p, so the Renyi entropy of the density matrix corresponding to an ensemble of 
equiprobable states is the same as that of the rescaled Gram matrix corresponding to these states. 
We can use this to write down a formula for the Renyi entropy of a density matrix p corresponding 
to the communication matrix M of a function (as in the previous section, specialising to the uniform 
distribution on Alice and Bob's inputs), which gives a lower bound on its communication capacity 
and thus its entanglement-assisted communication complexity. 



S 2 (p) = -logtr(^(A/Mt) 2 ) 

= 4n-log (j2 ^MaMj^j j 



(29) 
(30) 



An - log MikMjkMuMji (31) 



Renyi entropic arguments have previously been used in a different way by van Dam and Hayden 
to put lower bounds on quantum communication complexity. 



IV. THE QUANTUM COMMUNICATION COMPLEXITY OF A RANDOM FUNCTION 



In this section, we will show a lower bound on the communication capacity - and thus the quantum 
communication complexity - of a random function (one which takes the value or 1 on each possible 
input with equal probability). Define the state p as 

?4 E where |^> = -L J2 (" 1 ) a?+1 K> (32) 

where a k is a randomly generated 2™-bit string, and represents the z'th bit of a k . We will show 
that the Renyi entropy S^p) is high for almost all p. 

Theorem IV. 1. Pr[5 2 (p) < (1 - $)n] < e -& 6n -i) 3 /2. 
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Proof. We have 



S 2 (p) = in- log M ik M jk ^ 

= An- log ( ]T ( E(^-) 2 ) + E f E M *^) 



(33) 



(34) 



= 4n-log(A 3 +T) (35) 
where we define N = 2™ and T = (J2k MikMjk) 2 . It is then clear that 

Pr [S 2 {p) < (1 - 5)n] = Pr [T > N 3 {N S - 1)] (36) 

Each term in the inner sum in T (the sum over fc) is independent and picked uniformly at random 
from {—1,1}. We will now produce a tail bound for T using "Bernstein's trick" (see Appendix A of 
0): from Markov's inequality we have 

Pr[T > a] < E(e AT )/e Aa < E(e AXl1 ) N * /e Xa (37) 

where we define — (J2k MikMjk) 2 : each Xij is independent and identically distributed, so T is 
the sum of N(N — 1) < TV 2 copies of X\\. It remains to calculate E(e AXl1 ). This can be written 
out explicitly as follows. 

N 

E (^ n ) = ^u r A( ^ )2 (38) 

fc=0 ^ ' 

It is then straightforward to see (using an inequality from that the following series of inequalities 
holds. 



E ( eAXl1 ) < ^E(I) (^-^ +e-* N -^) < ^lE (I) eA2( ^ 2fc)4/2 ( 39 ) 

fc=0 ^ ' k=0 ^ ' 

^f( N \^^2e^ (40) 



- 2 *-i ^ V fc 
Inserting this in eqn (|37|l . and minimising over A, gives 

Pr [T > a] < 2e~ a2 / 2Ar6 (41) 
and substituting a = N 3 (N S - 1) gives the required result. □ 

In particular, putting 5 = 1/2 gives that Pr[S 2 (p) <n/2] < 2e - ( x/ ^ 1)2 / 2 , which is doubly 
exponentially small in n. As p corresponds to the communication matrix of a random function, 
Theorem III . 1 1 immediately gives the result that the entanglement-assisted quantum communication 
complexity of almost all functions is Q(n). 



V. DISCUSSION AND OPEN PROBLEMS 



We have shown that the implementation of any distributed computation between Alice and Bob 
entails the ability to communicate from one user to the other. This communication capacity of a 
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Boolean function of two arguments is naturally a lower bound on the communication complexity 
to compute that function, and we have proved corresponding lower bounds, even in the presence of 
arbitrary entanglement. 

These bounds show that random functions of two n-bit strings mostly have communication com- 
plexity close to n. However, in general it has to be noted that our bounds are not that good: an 
example is provided by the set-disjointness problem, where Alice and Bob want to determine if their 
strings x and y have a position where they are both 1. It is known that the quantum communication 
complexity of this function is Q(y/n) |ll l23| . On the other hand, the entropy in our main theorem 
was already computed for this case in Q, and it is only O(logn). Thus, not quite surprisingly, the 
ability of a function to let Alice communicate to Bob is not the same as the communication cost of 
implementing this computation. 

Looking again at our main theorem, we are left with one interesting question: is the logarithmic 
factor that we lose in the bounded error model really necessary? It appears to be a technicality, 
since we need to boost the success probability to apply Fannes' inequality, but we were unable to 
determine if it is just that or if there are cases in which the lower bound is tight. 
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